Software process improvement implementation risks: A qualitative study based on software development maturity models implementations in brazil

Abstract

Background: Several problems affect software process improvement (SPI) initiatives planning and institutionalization. Past SPI initiatives provide valuable knowledge that can be used to identify risks that might affect new ones. Aims: In this article we aimed to identify risks that might affect SPI initiatives involving the adoption of software development maturity models such as CMMI-DEV and MR-MPS-SW. Method: We (i) conducted a systematic mapping study to identify potential risks sources in Brazilian SPI-related literature and (ii) performed a qualitative analysis of selected articles using coding procedures and thematic analysis. Results: From 86 articles discussing SPI-related problems we were able to identify 17 risk categories, or top-level risks, that might affect software development maturity models deployment. These 17 risk categories are decomposed on 135 first level risks. Each risk is associated to possible causes, consequences and events. Among the most critical risk categories identified are: inadequate process definition, lack of support or commitment, lack of human resources, resistance to SPI initiative and lack of knowledge.